Generating GPG key for signing RPM packages

gpg --gen-key

Recommended preferences:

• Type: RSA and RSA
• Size: 2048
• Validity: Forever
• Real name: Your repository name
• Email address: Public email address

If there is no enough entropy on the system for key generation, you can use utility rngd.

Install rng-tools:

sudo yum install rng-tools

Run this command in separate session:

sudo rngd -r /dev/urandom

Check if key was added to your keychain:

gpg --list-keys

If you got error message gpg: WARNING: using insecure memory! do the next command:

sudo chmod 4755 /usr/bin/gpg

Install GPG key for singing RPM packages

Export key to file:

gpg --export -a 'MYSUPPAREPO' > RPM-GPG-KEY-MYSUPPAREPO

Import key into RPM keychain:

sudo rpm --import RPM-GPG-KEY-MYSUPPAREPO

List all keys installed into RPM keychain:

rpm -q gpg-pubkey --qf '%{name}-%{version}-%{release} --> %{summary}\n'

Export private key to file

gpg --output mysupparepo.private --armor --export-secret-key 'MYSUPPAREPO <my@supparepo.com>'